Security & Privacy

Credit applications are sensitive. We treat them that way.

Our platform handles personal and financial information every day. Protecting it shapes how we build our software, manage access and operate our business.

Security measures

 We use a combination of technical safeguards, secure development practices and ongoing employee training to keep personal and financial information protected.

shield-check

Data Protection

We encrypt information in transit and at rest. Access is restricted by role and permissions are reviewed regularly.

monitor-check

Secure Development

Our development process includes peer code reviews, automated testing and separate development and production environments.

user-round-group

Our People

Our team completes annual security training, with background checks and confidentiality agreements in place.

book-open-check

Security Testing

Our internal security team conducts regular audits and develops increasingly robust automated validation.

Independently audited & tested

Our security practices are backed by rigorous independent assessments.

clipboard-check

SOC 2 Type II

An independent auditor assesses the design and operating effectiveness of our security controls over time.

scan-search

Pen Test

An independent security firm conducts regular penetration testing to validate the strength of our platform's security measures.

Privacy practices

Protecting personal information also means being responsible about how it's collected, used and shared. Our privacy practices address applicable Canadian requirements, including PIPEDA and Alberta PIPA.

Our Privacy Policy provides more details about how personal information is handled, including access and correction requests.

Hosted in Canada

Our core platform and production data are hosted in Canada. Some third-party service providers may process information in other jurisdictions, in accordance with our strict security requirements for vendors.